summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorandroid-build-team Robot <android-build-team-robot@google.com>2020-11-03 18:04:04 +0000
committerandroid-build-team Robot <android-build-team-robot@google.com>2020-11-03 18:04:04 +0000
commit6dd07bc299e1ceaf1f0ee1cf5e8a3d4c3c449f34 (patch)
treeb7ab800dfeb2bfc7f74acb98104c89c6d332f303
parent3bc12a5df4a14ba442e5faf8ec74663c1b02b496 (diff)
parent053ca8fb4b98c403f55ad8b07bcc2253a2c04e21 (diff)
downloadredfin-sepolicy-android11-platform-release.tar.gz
Snap for 6948038 from 053ca8fb4b98c403f55ad8b07bcc2253a2c04e21 to rvc-platform-releaseandroid-platform-11.0.0_r4android-platform-11.0.0_r3android11-platform-release
Change-Id: I8be7c7e4fdf0c2937e89213f085bfbe5aaecf27c
-rw-r--r--vendor/google/file_contexts2
-rw-r--r--vendor/google/hal_dumpstate_impl.te3
-rw-r--r--vendor/google/pixelstats_vendor.te27
-rw-r--r--vendor/google/system_server.te2
4 files changed, 33 insertions, 1 deletions
diff --git a/vendor/google/file_contexts b/vendor/google/file_contexts
index d53eadc..7919670 100644
--- a/vendor/google/file_contexts
+++ b/vendor/google/file_contexts
@@ -1,4 +1,4 @@
# vendor binaries
/vendor/bin/hw/android\.hardware\.usb@1\.2-service\.redfin u:object_r:hal_usb_impl_exec:s0
-/vendor/bin/hw/android\.hardware\.vibrator@1\.3-service\.redfin u:object_r:hal_vibrator_default_exec:s0
+/vendor/bin/hw/android\.hardware\.vibrator-service\.redfin u:object_r:hal_vibrator_default_exec:s0
/vendor/bin/hw/android\.hardware\.dumpstate@1\.1-service\.redfin u:object_r:hal_dumpstate_impl_exec:s0
diff --git a/vendor/google/hal_dumpstate_impl.te b/vendor/google/hal_dumpstate_impl.te
new file mode 100644
index 0000000..83d1673
--- /dev/null
+++ b/vendor/google/hal_dumpstate_impl.te
@@ -0,0 +1,3 @@
+# Access to WLC firmware info
+allow hal_dumpstate_impl sysfs_wlc:dir r_dir_perms;
+allow hal_dumpstate_impl sysfs_wlc:file r_file_perms;
diff --git a/vendor/google/pixelstats_vendor.te b/vendor/google/pixelstats_vendor.te
new file mode 100644
index 0000000..4522965
--- /dev/null
+++ b/vendor/google/pixelstats_vendor.te
@@ -0,0 +1,27 @@
+# pixelstats vendor
+type pixelstats_vendor, domain;
+
+type pixelstats_vendor_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(pixelstats_vendor)
+r_dir_file(pixelstats_vendor, sysfs_pixelstats)
+
+unix_socket_connect(pixelstats_vendor, chre, chre)
+
+get_prop(pixelstats_vendor, hwservicemanager_prop)
+hwbinder_use(pixelstats_vendor)
+allow pixelstats_vendor hal_pixelstats_hwservice:hwservice_manager find;
+
+allow pixelstats_vendor fwk_stats_hwservice:hwservice_manager find;
+binder_call(pixelstats_vendor, statsd)
+
+allow pixelstats_vendor sysfs_scsi_devices_0000:file rw_file_perms;
+r_dir_file(pixelstats_vendor, sysfs_batteryinfo)
+# UeventListener
+allow pixelstats_vendor self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
+
+# wlc
+allow pixelstats_vendor sysfs_wlc:dir search;
+
+# OrientationCollector
+allow pixelstats_vendor fwk_sensor_hwservice:hwservice_manager find;
+binder_call(pixelstats_vendor, system_server)
diff --git a/vendor/google/system_server.te b/vendor/google/system_server.te
new file mode 100644
index 0000000..2adcf05
--- /dev/null
+++ b/vendor/google/system_server.te
@@ -0,0 +1,2 @@
+# pixelstats_vendor/OrientationCollector
+binder_call(system_server, pixelstats_vendor)